A set of security guidelines known as PCI compliance, or Payment Card Industry Data Security Standard (PCI DSS) compliance, is intended to guarantee that any business that receives, handles, stores, or transmits credit card data does so in a secure setting. It's a set of guidelines set by big credit card companies to protect cardholder data; it's not a law. A company's reputation may suffer and heavy fines may follow noncompliance.